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Cn , Abstract. The number of points on a hyperelliptic curve over a field of 

q elements may be expressed as 5+1 + 5* where S is a certain character 
sum. We study fluctuations of S as the curve varies over a large family 
of hyperelliptic curves of genus g. For fixed genus and growing q, Katz 

i~^, ' and Sarnak showed that S/ ^Jq is distributed as the trace of a random 

2g X 2g unitary symplectic matrix. When the finite field is fixed and the 
genus grows, we find that the the limiting distribution of S is that of a 

P^ ' sum of q independent trinomial random variables taking the values ±1 

\^ , with probabilities l/2(l + g^^) and the value with probability l/(g+l). 

' ' When both the genus and the finite field grow, we find that S/ ^ has 

'"Ti \ a standard Gaussian distribution. 
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29 ■ 1- Introduction 

O 

QP ' Given a finite field F^ of odd cardinality q and a square-free monic poly- 

nomial F E Fg[X] of degree d > 3, we get a smooth projective hyperelliptic 

^J ' curve Cf with affine model 

O 

00 

O ■ Cf:Y^ = F{X) 



k^ \ having genus g = {d — 2)/2 when d is even and g = {d — l)/2 when d is 

5^ ' odd. In this note we study the fluctuations in the number of Fg-points on Cp 

when F is drawn at random from the set of all square-free monic polynomial 
F G Fg[X] of degree d, where the probability measure is obtained by picking 
the coefficients of F uniformly in F^ and conditioning on F being square free. 
Correspondingly we get a probability measure on a family of hyperelliptic 
curves of genus g > 1 defined over F^. Our goal is to study these fluctuations 
in the limit of either large genus or large q, or both. 
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The number of Fg-points on Cp can be written aqj q + S{F) + 1 where 
S{F) is the character sum 

S{F) = Y, x{F{x)) 

and X is the quadratic character of F^ (with the convention that x(0) = 0)- 
Thus the problem is equivalent to studying the fluctuations of S{F) as F 
varies over all square-free polynomials in Fg[X] of degree d, in the limit as 
either d ox q (or both) grow. 

Our finding is that there are three distinct types of distribution results 
according to the way the parameters g and q are allowed to grow: 

i) For q fixed and the genus 5 — > oo, we find that S{F) is distributed 
asymptotically as a sum of q independent identically distributed (i.i.d.) tri- 
nomial random variables {-^i}^=i, i.e., random variables taking values in 
0, ±1 with probabilities l/(g + 1), 1/2(1 + q~^) and 1/2(1 + g"^) respec- 
tively. 

ii) When the genus g is fixed and q — > cxd, S{F)/ yjq are distributed as the 
trace of a random matrix in the group USp{2g) of 2g x 2g unitary symplectic 
matrices. This is due to Katz and Sarnak [5j. 

iii) When both g ^ 00 and g — > co we find that S{F)/ yjq has a Gaussian 
value distribution with mean zero and variance unity. 

The case (iii) when both variables grow can be thought of as a limiting 
case of either the two previous ones, when one of the two parameters is held 
fixed. It is thus a good consistency check to see that the limit distributions 
in both cases (i) and (ii) are a standard Gaussian. Indeed, in the case 
when q is fixed, (i) gives that the limit distribution of S{F)/y/q is that 
of a normalized sum (Xi -|- • • • -|- Xg)/y^ of q i.i.d. random variables; in 
turn the distribution of a normalized sum of such i.id.'s converges, as q ^ 
cxD, to a Gaussian distribution with mean zero and variance unity by the 
Central Limit Theorem. In case the genus g is fixed, (ii) gives that the 
limit distribution of S{F)/ ^fq is that of the traces of random matrices in 
USp{2g). The limit distribution of traces of a random matrix in USp{2g), as 
g' — > 00, is a standard Gaussian by a theorem of Diaconis and Shahshahani 
[3]. Of course this is not a proof of (iii), as it only addresses the limiting 
form of the limit distribution in (i) and (ii), that is either limg^oo(lim9^oo) 
or limg^oo(li™<j^oo) and not the joint limit linig^oo ,3-^00- 

1.1. Some related work. 1. In the unpublished manuscript [8], Larsen 
studied moments for a related family of hyperelliptic curves, namely curves 



Giving the number of points of Cf a spectral interpretation, it is more natural to 
write the number of points as g — S'{F) + 1, where S'{F) = —S{F) is the trace of the 
action induced by the Frobenius automorphism on a certain cohomology group. However, 
for our purposes, studying S{F) will lead to slightly simpler notation, and, as we shall see, 
the distribution of S{F) is symmetric, hence S(F) and S'{F) have the same distribution. 
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of the form Y"^ = \Yi^i{X — ai), where ai, . . . , a^ ranges over all n-tuples 
consisting of distinct elements of Fg, and obtained Gaussian moments. 

2. Knizhnerman and Sokolinskii [61 |7j computed moments of the character 
sum S{F) when F ranges over all monic non-square (rather than square- 
free) polynomials to investigate extreme values taken by S{F) (we thank 
Igor Shparlinski for this reference). 

3. Bergstrom [Ij used methods closely related to ours in order to obtain 
equivariant point counts for families of hyperelliptic curves. These point 
counts were then used to determine cohomology groups of the moduli space 
of stable curves of genus 2 with n marked points, for n < 7. 

4. Finally, we refer to the recent preprint of Faifman and Rudnick p[| which 
studies the statistics of the zeros of the zeta function of the curves Cp over 
a fixed finite field in the limit of large genus. 

1.2. The main results. Before giving a more quantitative statement of 
our main results, we will need some notation. Let V^ C Fq[X] be the set of 
monic polynomials of degree d, and let T^ C Vd be the subset of square free 
polynomials of degree d. We will model S{F) as a sum of q independent 
identically distributed (i.i.d.) trinomial random variables {Xi}j^^, where 
each Xi takes values in 0, ±1 with probabilities l/{q + 1), 1/2(1 -|- q~^) and 
1/2(1 + q~^) respectively. 

For q fixed and d -^ oo, we show that S{F) behaves as "^l^iXi in the 
following sense: 

Theorem 1. If q is fixed and d tends to infinity then the distribution of 
S{F), as F ranges over all elements in Td, is that of a sum of q independent 
trinomial random variables. More precisely, for s G Z with \s\ < q, we hav^o 

l{F<,r,:S(F) = .,H ^ ^^^^ (v X. = ,) . (1 + 0(,<3.-')/')). 

Remark. We may also let q tend to infinity in Theorem d provided that d 
tends to infinity in such a way that d > 3q. 

By studying the moments we find that S{F)/ yfq has a Gaussian value 
distribution when both d, q tend to infinity. 

Theorem 2. If d,q both tend to infinity, then the moments of S{F)/ ^Jq 
are asymptotically Gaussian with mean and variance 1. In particular the 
limiting value distribution is a standard Gaussian. 



Here, and in what follows, all constants implied by the 0(-)-notation will be absolute. 
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2. Proof of Theorem \T\ 



The idea of the proof is to make the following heuristic precise: Putting 
the uniform probability measure on J^, we may view / — > S{f) as a random 
variable on J^. S{f) can in turn be written as 



Sif) = Y^ X,, 



where for each x G F^, X^ = x{f{x)) is also a random variable on J^. Then, 
as d grows, the variables {Xx}x€¥q become independent and the distribution 
of each individual Xx is that of the earlier mentioned trinomial random 
variable. 

Thus, we will study the following slightly more general problem: Given 
a subset S C ¥q and a tuple a = {ax)xes, o-x S Fg, we wish to find the 
probability that for a randomly selected F £ J^ we have F{x) = ax for all 
x£S. 

Before proceeding we need to introduce some additional notation. For 
F E Fg[X], write F = YYi=i ^t ^s a product of irreducible polynomials, 
and let 

, , Jo if gj > 1 for some i, 

I (—1)"" if F is square free. 
Further, put 

1^1 .^ gdeg(F) 

and let 

F monic F irreducible 

be the (incomplete) zeta function of A^/F^. 

We will need to know the number of square free monic polynomials, which 
can easily be deduced from the identity 

d>0 

Lemma 3. The number of square free monic polynomials of degree d equals 

r/_gd-i = <^^/^(2) ifd>2, 

'''"1/ ^fd = ^^. 

We shall also need the following simple counting Lemma which is at the 
heart of the independence result. 

Lemma 4. For I < q let xi,X2, ■■■ ,xi £ ¥q be distinct elements, and let 
ai,a2, ■ ■ ■ ,ai G Fg. If d> I, then 

\{F G Vd : F(xi) = ai, . . . , F{xi) = ai}\ = q^'' . 
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Proof. Let Vd = {g e ¥,[X] : deg{g) <d-l}. The map f{X) ^ g{X) := 
f{X) — X'^ then defines a bijection from V^ to Vd- Since f{xi) = Oi for 
1 < i < / is equivalent to g{xi) = Oi — xf for 1 < i < /, we find that 

(2.1) \{feVd:fixi) = aiiovl<i<l}\ 

= \{9 G Vd : gix^) = Oi - xf for 1 < i < /}|. 

Now, the evaluation map g -^ {g{xi), . . . ,g{xi)) is a linear map from Vd to 
Fg, and its kernel consists of all g & Vd that are divisible by nj=i(^ ~ ^«)- 
Hence the Fg-dimension of the kernel equals d — I, and since dimjr (Vd) = d 
the cokernel has dimension /. In particular, the evaluation map is surjective, 
and both sides of (j2.ip equal q'^~^ for all choices of ai, . . . , a^. D 

Next we determine the probability of a random polynomial in !Fd taking 
a prescribed set of nonzero values on I points. 

Lemma 5. Let d > 2 and I < q be a positive integers, let xi,X2, ■■■ ,xi £ Fg 
be distinct elements, and let ai,a2, ■ ■ ■ ,ai G Fg be nonzero elements. Then 



\{FeTd: 


: F{x,) -- 


= ai,F(x2) = 


= a2,.. 


■,F{xi) = 


ai}\ 








l-^dl 




Q~ 


I 




(l-q 


,-2)/ 


Proof. 


Using 


; inclusion-exclusion. 


we find that 




\{F 


G-^d: 


F{x,) = 


= ai for 1 < i 


<l}\- 


= >; 

F€Vd:F(x, 
for 1 < j 


1 

)=a.i 
< I 



1 + Oiq 



l-d/2- 



KF? 



Y, l^{D)\{FGVd-2dcgiD)-D{xifF{xi}=a,foTl<i<l}\. 

D:deg{D)<d/2 

With Y2 denoting the sum over all polynomials such that D{x) ^ for 
all X G \x\^X2^ ■ ■ ■ ,xi}, we find, since Oj 7^ for all i < I, that the above 
equals 
(2.2) 

J^' fiiD)\{F e Fd_2deg(D) : F{xi) = aiD{x,r^ for 1 < i < /}|. 

D:deg{D)<d/2 

Now, as long as deg(F) = d — 2deg{D) > I, by Lemma HI we have 

\{F e y,_2deg(D) : F{x,) = a,D{xi)-^ for 1 < i < /}| = g'^-2dcg(D)-z 
hence (j2.2p equals 
(2.3) q'^-^ Y^ ^i(D)^-2dcg(D)^g^^Q^ 

D:deg{D)<{d-l)/2 



6 PAR KURLBERG AND ZEEV RUDNICK 

where, since there can be at most one polynomial F of degree smaller than 
I that attains I prescribed values (at / distinct points), 

Error < Yl 1 = 0{q'^/^). 

D:{d-l)/2<dcg{D)<d/2 

Our next goal is to evaluate the main term 

D:2deg{D)<d-l D 

Noting that 



j^'M^)i^r'^= n (i-i^i 



^2s\ 



D F: F is irreducible, 

F{xi)ytO for i < Z 



~2s 



C(2s)(l 

F : F is irreducible ^ ^ ^ 



~2s\l 

.ibie sv-n--y 

deg(F)>l 

we find that (j2.3p equals 
(2.4) 

Since |^rf| = -Ayr for d > 2, the probability that F{xi) = ai for all i < / 
equals 

(1-9 ^)' 
concluding the proof. D 

We now easily obtain the probability of F attaining any set of prescribed 
values. 

Proposition 6. Let xi,X2, ■ ■ ■ ,xi,xi+i,xi+m G ^q be distinct elements, let 
ai,a2, ■ ■ -ai G F^, and let a;+i = a;+2 = . . . = a;+m = 0. Then 

(2.5) -^\{FGTd- F{xi) = aiforl<i<m + l]\ 

\J-d\ 

(1 - l/grq-jm+l) / (3„^2Z-d)/2^ 

(l_g-2)m+Z -y^^^KI 

Proof. Any F ^ Td which vanishes at Z = {2;/+i,Xi+2, • • • ,Xi+m} can be 
written as 

l+va 

Fix) = n (^ - ^i)G{x) 

where G G Td-m is a square free polynomial that is non-vanishing on Z . 
Moreover, the condition that F{xi) = Oj for \<i<l can then be expressed 
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as G{xi) = ciiYljtljXii^i ~ ^j)^^ f°i' 1 < ^ < ^ and G{xj) is arbitrary (but 
nonzero) for l + l<j<l + m. In other words, there are {q — 1)™ possible 



values for G restricted to Z and by the Lemma [5] (in particular, see ([27 
the number of such polynomials equals 

(„d—m~-{m+l) \ 

( d-{l+m) \ 

^ '^' ^C(2)(l-g-2)-+' ^^ ') 

Dividing by the number of square free polynomials, we find that the prob- 
ability of a random F € J-'d vanishing on Z, and taking prescribed values 
outside Z equals 

(1 - l/g)"^g-("^+0 ^. (3m+2^-d)/2^^ 

D 

To finish the proof of Theorem [H we argue as follows: Let xi,X2, ■ ■ ■ ,Xq 
be distinct elements of Fg, let e^ G {—1,0,1} for 1 < i < ^, and define 
m = \{i E {1,2, ... ,q} : ej = 0}|. Taking I = q — tti in Proposition [6] and 
noting that the number of nonzero squares, respectively non-squares, in ¥g 
equals {q — l)/2, we find that 

\{F G ^d : xiFixi)) = e, for all 1 < i < q}\ 



(l + 0(g^^'?-''^/2)) 



i^«- (i-i/grr%, ,^.(3,-.)/2 



2 y (1-9-2)9 

= 2-('?— )ii_i/^l^(l + 0(g(3'?-'^)/2)) 

On the other hand, if Xi, . . . ,Xq are i.i.d. trinomial random variables as 
before, we have 

Prob.(Xi = ei for 1 < i < g) = (g + 1)"™ • 2-(''-'")(l + g"^)'""'? 

Summing over all possible choices of {^i}\^i such that ^l^i €« = s, the proof 
is concluded. 
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3. Proof of Theorem [2] 



Let 

Mi 



i^^^y-^^^mr 



\^d\ p'^^K V^ J 



be the fc-th moment of S{F) as F ranges over the family of square free 
polynomials of degree d in Fg[X]. As before, let Xi, . . . ,Xq be indepen- 
dent trinomial random variables, taking values —1,0,1 with probabilities 
(-^^, — pY, -^T^)- Theorem [2] is then an immediate consequence of the follow- 
ing Proposition. 

Proposition 7. We have 

In particular, if q,d ^ oo, Mk{q,d) agrees with Gaussian moments for all 
k. 

Proof. We have 

(3-1) M,iq,d) = j^Y: (7I^E^(/(-))) 

X1,X2, ...yXk&q fGTd 

= ^E^(^'0 E 4TE^(ri/(-^)") 

^ 1=1 i{x^,...,xi),{ei,...,ei))ePk,i ' "' fe:Fa \i=i / 

where 

I 
Pk,l = {{{xi,---,xi),{ei,. . . ,ei)) : xi,...,xi all distinct and E ^^ = ^} 

and c{k, I) is a certain combinatorial factor, whose exact form is unimpor- 
tant. Now, by Lemma [5l 



^E^(ri/(^^n=o+o(^' 



. . ., . _ .^~^/^) 



unless all e,- are even, in which case 



^ E X (ri/(-)") = jnk 



M.^'liV' i-(m7^+^^'^'"'^'^- 
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Noting that 

k 
1=1 {{xi,...,Xi),{ei,...,ei))ePt,j 

we find that the contribution from the error terms is <C q~'^l'^(f(f-^°-l'^ and 
thus (j3.ip equals 

^ l=\ {ixi,...,xi),{ei,...,ei))€Pk., ^ ' ^^ 

all Ei even 

On the other hand, since Xi, . . . ,Xq are independent trinomial random 
variables, we find that the expectation of the k-th. moment of their normal- 
ized sum is 



— 2^ IE(Xj^ • Xi^--- Xi^] 




-.k/2 

n,i2,...,ifcG{0,l,...,g-l} 



-i,^c(fc,o y: ^{U^t; 



1=1 {{xi,...,x,),{ei,...,ei))&Pk,i V = l 

As before we have E (117=1 -^t"^ ) — Oj unless all ej are even, in which case 



I 



^{U^';' ' 



,=1 'I (i + iM 

(note that E{Xf^) = for e odd, and E(Xp = 1/(1 + g-^) for e even), 
concluding the proof of the first assertion. 

The final assertion follows since the moments of a sum of bounded i.i.d. 
random variables converge to the Gaussian moments, cf. [21 section 30]. D 
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